Security and personal data

At Company BEWINES d.o.o., we are aware of the importance of the security of personal data of individuals, so we respect and enforce applicable national and European legislation in the area of data protection.

We process personal data in order to provide the best user and consumer experience in connection with our products and services, and we also ensure the highest level of care in the field of security and discretion in the storage and processing of your personal data.

All our actions related to personal data are in accordance with the current legislation in the field of personal data protection. We make sure that your personal data is stored properly and in accordance with the necessary care, we provide appropriate control over the purposes of processing your personal data and enable you to exercise all the rights you have under the current applicable legislation.

As an individual, you have the right to request:

• information about what personal data we process and for what purposes;
• limit or delete your personal data from our collections;
• correction of your personal data in case of imperfections in our collection;
• transfer of personal data from our collection to another processor or controller of personal data;
• objection in the event that the processing is intended for direct marketing, including the creation of user profiles, and we have a duty to exercise these rights for you.

You can read more about your personal data protection rights below.

LEGAL BASIS FOR PROCESSING

Company X processes your personal data only if it has a legal or other legal basis for doing so. Thus, we process data on the following bases:

1. Your direct consent through the contact form and the use of web analytics;
2. For the performance of a contract concluded between us as a service provider and you as a customer of the service;
3. For the purpose of implementing measures prior to the conclusion of the contract;
4. A legitimate interest relating in particular to the direct marketing of our services; and
5. Fulfillment of legal obligations, especially in the event of non-fulfillment of contractual obligations and thus appropriate sanctions.

DATA WE PROCESS AND OUR PURPOSE

Information obtained on the basis of the contact form and online purchase.

The information we obtain on the basis of the contact form is your name and surname, telephone number, e-mail address and the service(s) you need. The information we obtain to fulfill your purchase is as follows: name, surname, address, postal code, place, e-mail address and telephone number. We collect them in a safe way. We use them in order to respond to your demand / fulfillment of obligations from the sales contract and further business cooperation. We do not use this information for marketing purposes unless you expressly agree to it.

Data obtained on the basis of a concluded contract

The information obtained on the basis of the concluded contract is the name of the company, address, tax and registration number, as well as the name, surname and e-mail address of the contact person. We need them for transparent work, issuing invoices and at a later stage for possible recovery.

Data obtained from public records

The data obtained from public records are the name of the company, address and tax number. We need them to issue an invoice. In our business practice, there is no collection of data from databases for marketing purposes.

We process the data of non-business persons at the request of clients and under a contract with them. The client himself ensures that the data is collected in a lawful manner. In doing so, we obtain all the necessary information so that the data was indeed obtained in a lawful manner.

For the purpose of marketing our services, we advertise on various platforms (Google Ads, Facebook Ads Manager), using data obtained through advertising tools. We do not have access to specific personal data with these tools, but we can profile visitors to our site on the basis of this data, which is anonymized. By doing so, we want our marketing to be aimed at those who are interested in advertising services and to get the right ads for themselves.

PROCESSING OF PERSONAL DATA WHEN VISITING THE WEBSITE WWW.BE-WINES.COM

We use the advanced Google Analytics web analytics program to provide the best user experience on our website. The purpose is to ensure you, as users, that the website works smoothly and that it is optimized for the benefit of all our visitors.

As a user of our website, you have the right not to consent to the processing of this information immediately upon visiting the title page. You can avoid processing by using the appropriate cookie settings when you visit the website or the appropriate cookie settings on the web browser you are using.

If you choose to consent to the use of web analytics, you can do so in the same way that you turned it off or refused. You can change this on the address website.

If you consent to the processing of data (you accept cookies on the site), we obtain your anonymized IP address. That means that all your personal information is encrypted and not available to us.

RIGHTS OF INDIVIDUALS WHOSE PERSONAL DATA ARE PROCESSED

Individuals whose personal data we process have the right to be able to require from BEWINES d.o.o.:

• access to personal data,
• correction of personal data,
• deletion of personal data from the personal data file and
• restrictions on the processing of your personal data.

As an individual, you also have the right to object to the processing and the right to the portability of your personal data.

You exercise your rights with a written request, which you send via e-mail to info@be-wines.com

We will decide on your request within one month of receiving your request. This period may be extended by a maximum of two additional months in the event of complexity and a large number of requests, of which you will be notified.

Access to your personal data or acquaintance with the processing

You always have the right to be informed whether personal data is being processed in relation to you. Where this is the case, we provide you with access to your personal data and the following information:

1. the purpose(s) of the processing;
2. types of personal data;
3. users to whom personal data have been or will be disclosed;
4. the envisaged retention period of the personal data or, if that is not possible, the criteria used to determine that period;
5. where personal data is not collected from you, all available information regarding their source.

Access to the processing of personal data shall be free of charge, except where the data subject’s requests are manifestly unfounded or excessive, in particular because they are repeated. In such a case, the operator may:

1. charge a reasonable fee, taking into account the administrative costs of providing the information or communication or implementing the required action, or
2. refuse to act on the request.

Right to repair

As an individual, you have the right under the law to correct inaccurate personal data about you and, taking into account the purposes of processing, the right to supplement incomplete personal data.

Right of deletion

You have the right to have your personal information deleted when one of the following reasons applies:

1. personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
2. where you revoke the consent on which the processing takes place and where there is no other legal basis for the processing;
3. where you object to the processing and there are no overriding legitimate reasons for their processing;
4. personal data have been processed unlawfully.

The right to limit processing

You have the right to limit the processing of your personal data when one of the following cases applies:

1. where you dispute the accuracy of the data, for a period which allows us to verify the accuracy of the personal data;
2. the processing is illegal and you oppose the deletion of personal data and instead request a restriction on their use;
3. we no longer need your personal data for the purposes of processing, but you need them to assert, enforce or defend legal claims;
4. if you have filed an objection to processing based on our legitimate interests until it is verified that our legitimate reasons outweigh your reasons.

If the processing of personal data has been restricted, they are processed only with your consent with the exception of their storage, or for the purpose of asserting, enforcing or defending legal claims or for the protection of the rights of another natural or legal person.

We are obliged to inform you before the restriction on the processing of your personal data is lifted.

The right to data portability

You have the right to receive your personal data provided to us in a structured, commonly used and machine-readable form, and the right to pass this data on to another controller when the processing is based on your consent or the processing is carried out by automated means. At your request, where technically feasible, personal data may be transferred directly to another controller.

Right to contract

When we process your data on the basis of a legitimate interest for marketing purposes, including profiling, you may object to such processing at any time.

The right to lodge a complaint with the Information Commissioner.

If we do not decide on your request within the legal deadline or reject your request, you have the option of filing a complaint with the Information Commissioner.

PERIOD OF PERSONAL DATA STORAGE

We keep the data for no longer than is necessary to achieve the purpose for which we collected or further processed them or until the expiry of the statute of limitations for the fulfillment of obligations or the legally prescribed retention period.

Data on subscribers or customers whose processing is based on the law after the termination of the service relationship are kept until full payment of services, but no longer than the expiration of the statute of limitations for their receivables for services or contract performance, except when the law provides a longer retention period.

Other data obtained through your consent are kept for the duration of the cooperation and for 2 years after termination, unless the law provides for a longer retention period. If the customer who gave consent for the processing of personal data has not entered into a business relationship with us, his consent is valid for 2 years from its submission. As a taxable person under the law governing value added tax, we must ensure the retention of invoices for a further 10 years after the end of the year to which the invoices relate.

At the end of the retention period, the data shall be deleted, destroyed, blocked or anonymized, unless otherwise provided by law for each type of data.

DPO INFORMATION

Your personal data is collected and processed by the company BEWINES d.o.o., with its registered office Dolenjska cesta 83, Ljubljana, 1000 Ljubljana, Slovenia with registration number: 8773327000

The authorized person for the protection of personal data appointed by the controller is accessible via e-mail: INFO@BE-WINES.COM

FINAL PROVISIONS

If certain conditions are not regulated by these conditions for the processing of personal data, the applicable legislation shall apply instead.

We reserve the right to change these processing conditions. We will inform you about the change by publishing it on the official website or in another appropriate way. The change until published in the published one month before its entry into force on the official website.

The subject processing conditions apply and apply from 18.12.2020